CVE-2005-1029

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-04-06 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.

Affected products

Active Web Softwares Active Auction House: 7.1

References

http://digitalparadox.org/advisories/aass.txt
http://marc.info/?l=bugtraq&m=111280834000432&w=2
http://secunia.com/advisories/14839
http://www.osvdb.org/15281
http://www.osvdb.org/15282
http://www.osvdb.org/15283
http://www.securityfocus.com/bid/13032
http://www.securityfocus.com/bid/13034
http://www.securityfocus.com/bid/13035
http://www.securitytracker.com/alerts/2005/Apr/1013649.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/19977
http://digitalparadox.org/advisories/aass.txt

Get alerted when CVE-2005-1029 or the next vulnerability affects your stack